Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-6456

SQL Injection vulnerability in AVEVA Historian Server

AVEVA Historian Server has a vulnerability, if exploited, could allow a malicious SQL command to execute under the privileges of an interactive Historian REST Interface user who had been socially engineered by a miscreant into opening a specially crafted URL.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Aveva
Products
Historian
CVE-2025-61943

AVEVA Process Optimization SQL Injection

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Standard User) to tamper with queries in Captive Historian and achieve code execution under SQL Server administrative privileges, potentially resulting in complete compromise of the SQL Server.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Aveva
Products
Historian Process Optimization
CVE-2023-33873

AVEVA Operations Control Logger Execution with Unnecessary Privileges

This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileges to escalate to System privilege on the machine where these products are installed, resulting in complete compromise of the target machine.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Aveva
Products
Batch Management Communication Drivers Edge and 10 more
CVE-2023-34982

AVEVA Operations Control Logger External Control of File Name or Path

This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where these products are installed, resulting in denial of service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Aveva
Products
Batch Management Communication Drivers Edge and 10 more